CVE-2025-62235

CVE-2025-62235 : Authentication bypass by spoofing in Apache NimBLE allows an attacker to remove the original Bond and re-bind with an impostor via a specially crafted Security Request. Affected software: Apache NimBLE up to version 1.8.0; impact includes potential compromise of pairing/authentic...

CVE-2026-45813

CVE-2026-45813 covers an out-of-bounds write and integer underflow in the Apache NimBLE BASS service. The issue arises from improper validation when parsing the BASS service “Add Source” and “Modify Source” PDUs, which can cause a stack buffer overflow or arbitrary out-of-bounds read. It is trigg...